First commit

Author: acejam

Dockerfile

@@ -0,0 +1,34 @@
+FROM phusion/baseimage:0.9.19
+MAINTAINER Joshua Noble <[email protected]>
+
+RUN locale-gen en_US.UTF-8
+ENV LANG       en_US.UTF-8
+ENV LC_ALL     en_US.UTF-8
+ENV DEBIAN_FRONTEND noninteractive
+ENV HOME /root
+
+CMD ["/sbin/my_init"]
+
+RUN add-apt-repository ppa:nginx/stable && \
+    apt-get update && \
+    apt-get install -y curl git build-essential && \
+    cd /usr/src && \
+    apt-get build-dep -y nginx && \
+    apt-get source nginx
+
+RUN cd /usr/src/nginx* && \
+    git clone https://github.com/openresty/set-misc-nginx-module.git debian/modules/set-misc-nginx-module && \
+    git clone https://github.com/simpl/ngx_devel_kit.git debian/modules/ngx_devel_kit && \
+    git clone -b AuthV2 https://github.com/acejam/ngx_aws_auth.git debian/modules/ngx_aws_auth && \
+    sed -i -e 's/--add-module=\$(MODULESDIR)\/nginx-development-kit \\/--add-module=\$(MODULESDIR)\/ngx_devel_kit \\\n \t\t\t--add-module=\$(MODULESDIR)\/set-misc-nginx-module \\\n \t\t\t--add-module=\$(MODULESDIR)\/ngx_aws_auth \\/g' debian/rules && \
+    dpkg-buildpackage -us -uc && \
+    dpkg -i ../nginx-common*.deb && \
+    dpkg -i ../nginx-extras_*.deb
+
+RUN mkdir -p /etc/service/nginx
+ADD nginx.sh /etc/service/nginx/run
+ADD default.conf /etc/nginx/sites-available/default
+ADD nginx.conf /etc/nginx/nginx.conf
+
+EXPOSE 80
+RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

README.md

@@ -0,0 +1,32 @@
+# nginx-s3-proxy
+
+A Docker container for a custom version of nginx
+<!--
+
+
+[![Build Status](https://travis-ci.org/acejam/docker-bitmessage.svg?branch=basic-setup)](https://travis-ci.org/acejam/docker-bitmessage)
+[![Docker Stars](https://img.shields.io/docker/stars/acejam/bitmessage.svg?maxAge=2592000)](https://hub.docker.com/r/acejam/bitmessage)
+[![Docker Pulls](https://img.shields.io/docker/pulls/acejam/bitmessage.svg?maxAge=2592000)](https://hub.docker.com/r/acejam/bitmessage)
+
+A Docker container for Bitmessage
+
+## Quick Start
+
+    docker run -d --name bitmessage --restart=always -v /data/bitmessage:/root/.config/PyBitmessage -p 8444:8444 -p 8442:8442 acejam/bitmessage:latest
+
+## Config options
+
+This container includes support for various Bitmessage configuration values. These values can be set when calling `docker run` through the use of environment variables.
+
+The following values are configurable:
+* `RPC_USER`
+* `RPC_PASS`
+* `RPC_INTERFACE`
+
+For example, to run the container with the username "DevUser" and a password of "P@ssw0rd123", you can run the following:
+
+      docker run -d -e RPC_USER="DevUser" -e RPC_PASS="P@ssw0rd123" acejam/bitmessage:latest
+
+## Data persistence
+
+Coming soon! -->

default.conf

@@ -0,0 +1,25 @@
+server {
+  listen 80;
+  server_name localhost;
+
+  location / {
+    set_by_lua $s3_bucket 'return os.getenv("S3_BUCKET")';
+    set_by_lua $aws_access_key 'return os.getenv("AWS_ACCESS_KEY")';
+    set_by_lua $aws_secret_key 'return os.getenv("AWS_SECRET_KEY")';
+
+    s3_bucket $s3_bucket;
+    aws_access_key $aws_access_key;
+    aws_secret_key $aws_secret_key;
+
+    resolver 8.8.8.8;
+    proxy_pass https://$s3_bucket.s3.amazonaws.com;
+    proxy_set_header Authorization $s3_auth_token;
+    proxy_set_header x-amz-date $aws_date;
+
+    proxy_cache s3cache;
+    proxy_cache_valid 200 302 24h;
+    proxy_cache_valid 404 1m;
+    proxy_cache_convert_head on;
+    add_header X-Proxy-Cache $upstream_cache_status;
+  }
+}

nginx.conf

@@ -0,0 +1,49 @@
+user www-data;
+worker_processes auto;
+pid /run/nginx.pid;
+daemon off;
+
+env S3_BUCKET;
+env AWS_ACCESS_KEY;
+env AWS_SECRET_KEY;
+
+events {
+       	worker_connections 768;
+}
+
+http {
+       	sendfile on;
+       	tcp_nopush on;
+       	tcp_nodelay on;
+       	keepalive_timeout 65;
+       	types_hash_max_size 2048;
+        server_names_hash_bucket_size 64;
+
+       	include /etc/nginx/mime.types;
+       	default_type application/octet-stream;
+
+       	ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
+       	ssl_prefer_server_ciphers on;
+
+        access_log /dev/stdout;
+        error_log /dev/stderr error;
+
+        gzip on;
+        gzip_disable "msie6";
+        gzip_http_version 1.1;
+        gzip_types
+            text/css
+            text/javascript
+            text/xml
+            text/plain
+            application/javascript
+            application/x-javascript
+            application/json;
+
+        proxy_cache_lock on;
+        proxy_cache_lock_timeout 5s;
+        proxy_cache_path /etc/nginx/cache levels=1:2 keys_zone=s3cache:10m max_size=30g;
+
+       	include /etc/nginx/conf.d/*.conf;
+       	include /etc/nginx/sites-enabled/*;
+}

nginx.sh

@@ -0,0 +1,2 @@
+#!/usr/bin/env bash
+nginx